Last month the company announced changes that are meant to improve its internal privacy and security practices, including enhancing training for employees on information-security awareness and requiring every engineering project leader to maintain a "privacy design document for each initiative they are working on, " Mr. Eustace said in the post.